# CVEs published 2017-02-22

41 CVEs were published on February 22, 2017: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2016-1245](https://cve.now/CVE-2016-1245.md): It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neigh (no CVSS, Quagga before)
- [CVE-2017-6077](https://cve.now/CVE-2017-6077.md): ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via s (CVSS 9.8, KEV)
- [CVE-2017-6187](https://cve.now/CVE-2017-6187.md): Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI i (no CVSS)
- [CVE-2016-3013](https://cve.now/CVE-2016-3013.md): IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. (no CVSS, IBM WebSphere MQ)
- [CVE-2016-3052](https://cve.now/CVE-2016-3052.md): Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. (no CVSS, IBM WebSphere MQ)
- [CVE-2016-8915](https://cve.now/CVE-2016-8915.md): IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to other channels running (no CVSS, IBM WebSphere MQ)
- [CVE-2016-8986](https://cve.now/CVE-2016-8986.md): IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HT (no CVSS, IBM WebSphere MQ)
- [CVE-2017-6188](https://cve.now/CVE-2017-6188.md): Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. (no CVSS)
- [CVE-2014-4677](https://cve.now/CVE-2014-4677.md): The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local users to execute arbit (no CVSS)
- [CVE-2016-8636](https://cve.now/CVE-2016-8636.md): Integer overflow in the mem\_check\_range function in drivers/infiniband/sw/rxe/rxe\_mr.c in the Linux kernel before 4.9.10 allows local users (no CVSS)
- [CVE-2016-9377](https://cve.now/CVE-2016-9377.md): Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local (no CVSS)
- [CVE-2016-9378](https://cve.now/CVE-2016-9378.md): Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local (no CVSS)
- [CVE-2016-9384](https://cve.now/CVE-2016-9384.md): Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table. (no CVSS)
- [CVE-2016-9400](https://cve.now/CVE-2016-9400.md): The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary ph (no CVSS)
- [CVE-2016-9909](https://cve.now/CVE-2016-9909.md): The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishan (no CVSS, html5lib)
- [CVE-2016-9910](https://cve.now/CVE-2016-9910.md): The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishan (no CVSS, html5lib)
- [CVE-2016-9956](https://cve.now/CVE-2016-9956.md): The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script. (no CVSS)
- [CVE-2017-5585](https://cve.now/CVE-2017-5585.md): OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return\_top\_results\_row (no CVSS)
- [CVE-2017-5586](https://cve.now/CVE-2017-5586.md): OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java (no CVSS)
- [CVE-2016-9682](https://cve.now/CVE-2016-9682.md): The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web ad (no CVSS)
- [CVE-2016-9683](https://cve.now/CVE-2016-9683.md): The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini (no CVSS)
- [CVE-2016-9684](https://cve.now/CVE-2016-9684.md): The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini (no CVSS)
- [CVE-2017-2684](https://cve.now/CVE-2017-2684.md): Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access (no CVSS, SIMATIC Logon All versions \< V1.5 SP3 Update)
- [CVE-2017-3821](https://cve.now/CVE-2017-3821.md): A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduc (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-3827](https://cve.now/CVE-2017-3827.md): A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (E (no CVSS, Cisco AsyncOS Software for Cisco ESA and Cisco WSA)
- [CVE-2017-3828](https://cve.now/CVE-2017-3828.md): A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remot (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-3829](https://cve.now/CVE-2017-3829.md): A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remot (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-3830](https://cve.now/CVE-2017-3830.md): A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of se (no CVSS, Cisco Meeting Server)
- [CVE-2017-3833](https://cve.now/CVE-2017-3833.md): A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cr (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-3835](https://cve.now/CVE-2017-3835.md): A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notice (no CVSS, Cisco Identity Services Engine)
- [CVE-2017-3836](https://cve.now/CVE-2017-3836.md): A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-3837](https://cve.now/CVE-2017-3837.md): An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Conferencing Server, c (no CVSS, Cisco Meeting Server)
- [CVE-2017-3838](https://cve.now/CVE-2017-3838.md): A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-sit (no CVSS, Cisco Secure Access Control System)
- [CVE-2017-3839](https://cve.now/CVE-2017-3839.md): An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthen (no CVSS, Cisco Secure Access Control System)
- [CVE-2017-3840](https://cve.now/CVE-2017-3840.md): A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redi (no CVSS, Cisco Secure Access Control System)
- [CVE-2017-3841](https://cve.now/CVE-2017-3841.md): A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disc (no CVSS, Cisco Secure Access Control System)
- [CVE-2017-3842](https://cve.now/CVE-2017-3842.md): A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) could allow an unauthent (no CVSS, Cisco Intrusion Prevention System Device Manager)
- [CVE-2017-3843](https://cve.now/CVE-2017-3843.md): A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to down (no CVSS, Cisco Prime Collaboration Assurance)
- [CVE-2017-3844](https://cve.now/CVE-2017-3844.md): A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote at (no CVSS, Cisco Prime Collaboration Assurance)
- [CVE-2017-3845](https://cve.now/CVE-2017-3845.md): A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker (no CVSS, Cisco Prime Collaboration Assurance)
- [CVE-2017-3847](https://cve.now/CVE-2017-3847.md): A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-s (no CVSS, Cisco Firepower Management Center Web Framework)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-02-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.